Error: rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
File:                     u2qTYF7QXN2ypNl62Gzmg68jfZk.mft (raw, json)
Hash identifier:          DAU8ESIkxQYOpU+1aGr40TpxgmXHjzIQ0t+O4cWrbsY=
Subject key identifier:   71:EF:68:14:19:26:3B:FF:58:5E:C3:F0:7F:42:A8:B1:02:A9:0F:CF
Authority key identifier: BB:6A:93:60:5E:D0:5C:DD:B2:A4:D9:7A:D8:6C:E6:83:AF:23:7D:99
Certificate issuer:       /CN=F366E949AF/serialNumber=BB6A93605ED05CDDB2A4D97AD86CE683AF237D99
Certificate serial:       0144
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u2qTYF7QXN2ypNl62Gzmg68jfZk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
Manifest number:          0143
Signing time:             Sun 25 Oct 2026 05:19:10 +0000
Manifest this update:     Sun 25 Oct 2026 05:19:09 +0000
Manifest next update:     Tue 27 Oct 2026 05:19:09 +0000
Files and hashes:         1: u2qTYF7QXN2ypNl62Gzmg68jfZk.crl (hash: 6wxN6V3gZqNCDHNuYlyyMBGzi080AZ6Q6dr2gSQujnE=)
                          2: 7289180CF84F11F0BF78CFC9DAE4EC9C.roa (hash: z9MMJacA+ExlSVPPYWNKz69P3b4S+8srK1BFgdhe96E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u2qTYF7QXN2ypNl62Gzmg68jfZk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E949AF, serialNumber=BB6A93605ED05CDDB2A4D97AD86CE683AF237D99
        Validity
            Not Before: Oct 25 05:19:09 2026 GMT
            Not After : Oct 27 05:19:09 2026 GMT
        Subject: CN=6add914e-314b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:aa:5d:a8:bd:b3:9f:cb:08:b6:97:3f:14:
                    bd:be:98:44:03:57:d5:04:fc:03:41:0e:79:a9:da:
                    a3:52:5d:d8:d8:e7:58:d9:a7:ca:70:25:84:3a:0f:
                    d7:a0:4e:1c:16:51:3b:90:83:7d:53:29:64:8f:8e:
                    e5:b5:80:2a:12:3d:5d:00:a9:7f:05:72:f1:99:f5:
                    8b:be:71:ae:57:2e:a8:d8:1e:3c:45:e5:bd:30:a8:
                    2b:c0:b8:0b:1a:d6:2f:6d:20:c6:35:da:42:fb:c6:
                    07:f3:ff:14:fe:11:a4:a2:a5:15:41:4c:5e:e2:3c:
                    e9:c6:c0:69:91:b1:2c:fb:ff:d9:75:31:9f:4e:3f:
                    3f:e4:dd:7b:b6:4d:b3:68:8d:68:13:5b:c7:74:7a:
                    d9:f4:36:d6:bb:f8:c7:d9:13:f7:54:da:26:78:bc:
                    30:51:9d:93:84:44:d4:5d:6f:e7:8a:ae:51:ac:05:
                    45:2b:ab:d9:d6:0a:87:d1:24:d6:2f:e5:d0:d0:a6:
                    be:32:d1:dd:ba:af:0f:90:b8:3d:73:08:c3:ff:d8:
                    96:31:52:b2:ba:fe:14:7d:4f:80:a0:0e:45:93:36:
                    34:5f:da:8c:4a:b5:09:07:a5:b4:a7:25:f3:10:61:
                    2b:68:80:4f:79:63:ea:cf:73:19:2b:75:64:5e:ec:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:68:14:19:26:3B:FF:58:5E:C3:F0:7F:42:A8:B1:02:A9:0F:CF
            X509v3 Authority Key Identifier:
                keyid:BB:6A:93:60:5E:D0:5C:DD:B2:A4:D9:7A:D8:6C:E6:83:AF:23:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u2qTYF7QXN2ypNl62Gzmg68jfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7e:22:e3:77:22:7c:10:ad:c9:ab:dd:83:c2:e1:1a:88:aa:
         ed:f3:86:5b:41:1f:1c:a9:ab:58:f3:7e:0f:e9:30:08:87:a0:
         a8:2c:a2:90:3f:ef:79:c0:0a:28:4e:81:fb:b9:ea:fd:ef:7a:
         6f:2e:45:e4:59:a6:c2:ad:d7:a0:e9:a0:08:e5:f2:49:80:d3:
         6a:56:f7:e9:fb:cc:9c:b3:9d:ea:b2:cc:60:cd:ba:77:5e:75:
         16:aa:c4:07:97:a7:e9:40:54:48:58:fe:24:ae:f4:f8:c3:c6:
         42:74:c1:65:20:56:48:5b:24:b2:fc:8d:95:50:2f:b1:2d:a1:
         18:80:99:a9:a5:84:2f:e1:95:ac:e9:b8:ef:ca:ab:61:8b:7d:
         3a:b2:06:36:d1:c4:77:8d:2e:2e:28:42:c2:b6:f0:48:4d:69:
         6a:d6:c4:f0:58:28:e8:4e:08:98:10:f4:75:e2:58:83:af:ee:
         3e:bb:07:3e:2b:1e:4a:19:af:9a:70:6f:30:f0:c3:48:0b:cc:
         d7:dc:26:ac:a3:40:d9:eb:1a:1c:32:3c:fa:91:3b:c0:32:10:
         43:de:0b:52:95:9b:66:4c:4b:5c:91:41:16:9d:34:82:f1:77:
         ec:ed:54:97:f7:9d:c4:3d:e3:11:0f:fb:9e:d5:39:85:fe:15:
         51:86:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:51:28 2026 by rpki-client